Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/px2KrDuViPFPnXmIUYt44vyGjEY.roa
File: px2KrDuViPFPnXmIUYt44vyGjEY.roa (raw, json)
Hash identifier: lUYmJZ5wlZNJGH9j6FTfLP6Kd+NQhwPHOxQKiqExLys=
Subject key identifier: A7:1D:8A:AC:3B:95:88:F1:4F:9D:79:88:51:8B:78:E2:FC:86:8C:46
Certificate issuer: /CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Certificate serial: 0183B1FE9DA3D1B9962C128E3B6DCBFCFA37
Authority key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/px2KrDuViPFPnXmIUYt44vyGjEY.roa
Signing time: Fri 07 Oct 2022 10:29:57 +0000
ROA not before: Fri 07 Oct 2022 10:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 195.85.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:fe:9d:a3:d1:b9:96:2c:12:8e:3b:6d:cb:fc:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Validity
Not Before: Oct 7 10:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a71d8aac3b9588f14f9d7988518b78e2fc868c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:5d:ca:58:0e:d7:d4:7e:45:e3:44:87:fe:
bc:d4:82:2c:fe:fb:92:5c:61:7e:bd:d5:c6:65:79:
b5:2b:76:f5:c1:2d:af:fb:00:ca:6f:8c:c3:4e:83:
9e:c4:97:36:0f:5d:e6:5b:f3:ba:55:c5:d1:0b:38:
20:15:c0:88:3c:c9:39:a0:cb:9a:96:24:1e:f7:db:
23:3d:54:13:de:76:dc:cc:02:e4:27:58:b4:05:bd:
74:eb:95:0d:5a:69:ab:01:d8:69:b3:51:35:af:46:
33:91:09:32:3f:90:ea:42:f4:5f:c6:83:de:2b:e3:
6a:50:84:dd:0e:9b:41:97:22:83:ae:20:45:96:14:
a4:ad:bd:7c:96:ff:8f:7e:af:9e:8f:bb:40:d4:74:
77:78:0f:c0:7b:b6:21:90:98:37:5e:bc:50:11:33:
db:99:49:0e:cd:20:e8:6a:c8:00:23:26:a2:4b:cc:
1a:91:ad:39:e2:7a:8d:63:43:ce:32:91:3e:3b:5f:
d2:a9:55:5e:cf:cc:7c:f3:5d:b6:eb:25:14:79:3e:
6d:f7:33:69:03:16:93:5f:32:ee:8b:35:e8:af:09:
d6:b7:70:07:27:8d:c1:76:ff:e0:03:17:36:83:bd:
3e:ea:c9:ea:1c:1c:bf:3e:5b:12:79:2c:4b:1f:a8:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:8A:AC:3B:95:88:F1:4F:9D:79:88:51:8B:78:E2:FC:86:8C:46
X509v3 Authority Key Identifier:
keyid:67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/px2KrDuViPFPnXmIUYt44vyGjEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.207.0/24
Signature Algorithm: sha256WithRSAEncryption
53:26:37:79:7e:bb:5a:01:03:12:6f:12:1e:7c:9f:ea:68:d9:
d8:3d:40:17:dc:e4:b1:4b:e3:a3:2c:a2:76:f3:32:c1:25:e4:
b5:f7:74:f1:b8:72:ca:51:63:87:49:81:ca:3b:19:40:39:d0:
34:eb:f0:39:a1:bf:3e:4b:10:49:0e:3e:02:92:a3:ad:32:45:
31:fa:ce:5f:03:2b:29:b2:74:08:2c:a0:08:ef:64:ce:4a:a7:
50:3e:a0:1d:65:55:98:dc:20:69:99:53:0e:f5:1a:bf:02:28:
72:0f:78:52:a1:62:a3:36:a8:61:4b:e1:0a:d6:10:a3:94:d3:
a1:5b:eb:54:af:cc:1a:93:0d:82:ce:4b:9f:b0:53:bd:6c:2c:
a6:ac:94:be:27:8c:f9:75:7a:7c:17:34:a1:7e:3c:5b:66:dd:
cf:95:eb:e3:26:46:f5:59:cc:93:89:4f:21:89:d6:70:f2:ee:
42:36:f4:1b:29:d1:0c:ca:5a:2e:7a:da:4d:df:87:a0:3d:87:
fc:a5:73:d8:05:04:94:25:d5:b0:69:71:c1:ed:21:6d:94:35:
54:a2:27:c0:33:ac:6d:4f:58:2f:b5:01:ec:c5:6d:c5:3f:04:
8d:16:37:f7:1f:d6:6c:ec:20:7a:b1:de:8b:db:51:53:22:98:
04:e1:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:44 2025 by rpki-client